IPv6 over OpenVPN

[User42]

As the title says I would like to give IPv4 OpenVPN clients access to the IPv6 internet. I have an internet connection that gives me IPv4 and a tunnel broker that gives me IPv6. I am relatively new to IPv6 and OpenVPN, so I was hopping for some advice and configuration instructions.

Thank You

[JKnott]

@User42

Have you looked at the IPv6 settings on the OpenVPN client and server pages. They're pretty self explanatory.

[User42]

I configured IPv6 and IPv4 on the VPN but when I check my IP address I get only IPv4. Why is this?

[Gertjan]

@User42 said in IPv6 over OpenVPN:

check my IP

Your browser picks whatever A or AAAA it has available in it's local cache, or upstream DNS cache, like the one pfSense is using. Or even farther up.

Use site like https://test-ipv6.com/ to force the detection.
The what-is-my-IP are to stupid. They should been called "do-I-have-a-conenction".

Also, I've set up pfSense so it offers my networks a IPv4 and IPv6 connection.
When I VPN into my pfSense from a remote, IPv4 only place, I do have a IPv4 and IPv6 from my pfSense VPN server.
This is because :
I have a dual IPv4 IPv6 stack at my disposal
I control the pfSense VPN server
I control the VPN client, but I'm actually just using the VPN client export utility from pfSense and stock VPN software.
and that does the job.

@User42 said in IPv6 over OpenVPN:

a tunnel broker that gives me IPv6.

tunnel.he.net ? That's the one I'm using also. If so, I be glad to post my settings.

[User42]

I also use HE, In my internal network I have IPv6 working it connects and the https://test-ipv6.com/ test passes but over the VPN I only get IPv6 and I fail the test.

[jsdss]

I have a tunnel provided by HE as well, but I am not routing v6 from that tunnel across my VPN. My ISP also provides me native v6. I am routing a subnet from that allocation over VPN. I have no reason to believe you can't get this working across your tunnel though.

You have to allocate a v6 subnet to your vpn and that is configured in the "IPv6 Tunnel Network". If that is done check your FW rules. There is not a rule auto generated for v6 on the VPN, you would need to create that.

If my memory serves me correctly, I don't believe there was any other trickery to the config.

[calvinsteel]

I do not have expertise to configure IPv6 on OpenVPn but I have a link where you can get a proper solution. https://www.purevpn.com/what-is-vpn/protocols/openvpn

[Gertjan]

@calvinsteel @User42 was asking about how to connect its OpenVPN clients to his pfSense OpenVPN server.
And you throw in a "commercial VPN solution" that has nothing to do with the subject of this thread.

[Gertjan]

User42 : if you have IPv6 working using tunnel.het.net, you can ping from your LAN any IPv6 enabled host, like :

C:\Users\Left>ping -6 netgate.com

Envoi d'une requête 'ping' sur netgate.com [2610:160:11:11::73] avec 32 octets de données :
Réponse de 2610:160:11:11::73 : temps=166 ms
Réponse de 2610:160:11:11::73 : temps=166 ms
Réponse de 2610:160:11:11::73 : temps=166 ms
Réponse de 2610:160:11:11::73 : temps=166 ms

(sorry, french systems here)

To make IPv6 work for OpenVPN warrior access :

I already used the above mentioned /64 for my LAN.
So I took the fourth /64 from the /48block to assign it to the OpenVPN server :

Note ......ccea.3:: == fourth /64 block, ......ccea.0::64 being block 1

This :

doesn't need any explanation.

The server setup looks like this :

I'm not using the OpenVPN "placeholder" interface. I created a OPENVPN 'per VPN server instance' interface, and added these rather logic rules :

so that any foreign traffic can actually enter.

And, from memory, that's all I did no make it work.

From that point I can remote login using OpenVPN into pfSense, and use it's IPv6 facilities.

[User42]

Thank You for your help on everything, it works now! :)